Dashboard / CVE-2026-92574

CVE-2026-92574

HIGH
MEDIUM Priority: 0.06 BB Relevance: 68/100
Published: 2026-09-21 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Attack Surface

Network Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: None
S: Unchanged
C: High
I: High
A: High

Description

A vulnerability in CRI-O checkpoint restore allows a user who can create a pod from a malicious checkpointed container to bypass the destination Kubernetes security context. The restored process may retain credentials, Linux capabilities, no_new_privs, and seccomp state from the checkpoint instead of enforcing the destination configuration. This can allow execution with elevated privileges across the container security boundary. Affected upstream supported versions are CRI-O 1.34 and later. Downstream Red Hat products are affected from OCP 4.17 onward. Fixes have been applied to supported branches but are not yet released. Exploitation requires permission to create a pod from a malicious checkpoint image and checkpoint restore functionality to be available.

Weakness Classification (1)

Affected Software (3)

VendorProductVersion
&mdash; &mdash; 1.34.0 < 1.34.14
&mdash; &mdash; 1.35.0 < 1.35.9
&mdash; &mdash; 1.36.0 < 1.36.6

References & Advisories (2)

Bug Bounty Relevance

68 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

8.8 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.65%
Raw Score 0.006540
Percentile 51.3%
Date 2026-10-30

EPSS Trend

2026-10-30
0.00654
2026-10-29
0.00654

Intelligence Sources

mitre ref →
nvd ref →

External Links